Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Ld7u8M7K1JHKvU1Te8Ao7cpbHmI.roa
File: Ld7u8M7K1JHKvU1Te8Ao7cpbHmI.roa (raw, json)
Hash identifier: z63VkWBaqFmJH/Ruc2bOiYZcUoRlEiTo+TlYwfZ1K3k=
Subject key identifier: 2D:DE:EE:F0:CE:CA:D4:91:CA:BD:4D:53:7B:C0:28:ED:CA:5B:1E:62
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 018CC493411E2188436DC86177FECE09AE08
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Ld7u8M7K1JHKvU1Te8Ao7cpbHmI.roa
Signing time: Mon 01 Jan 2024 10:30:33 +0000
ROA not before: Mon 01 Jan 2024 10:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205404
IP address blocks: 145.14.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:41:1e:21:88:43:6d:c8:61:77:fe:ce:09:ae:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 10:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ddeeef0cecad491cabd4d537bc028edca5b1e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:ab:d0:27:d8:e1:d9:ae:dd:81:1c:47:50:
5b:ed:1d:8d:15:5b:38:b2:cf:f0:ee:1d:db:96:1b:
a6:59:8c:0c:84:5c:e0:87:00:ca:0e:87:de:b1:c4:
4e:12:a3:b4:67:21:9d:2c:d8:4b:21:9f:f8:8a:88:
e1:55:e2:7d:ff:af:56:e8:5d:fc:90:d8:87:88:97:
40:9c:bd:7c:2d:2b:12:f0:22:a9:d9:13:16:81:b3:
49:e6:ff:e2:66:46:db:2f:ca:90:b7:cd:b8:3d:ae:
a6:9c:f0:0d:35:ba:75:72:9a:58:a9:db:ee:b1:87:
64:27:a3:50:84:bc:57:84:a2:34:f5:0d:d5:ba:ed:
a2:d7:0b:b0:bb:1b:f4:b3:3e:de:21:6a:c7:e8:6b:
9b:e3:fb:4c:a9:63:8d:eb:3f:48:a7:b5:c8:aa:9a:
82:2c:ec:97:f8:dc:82:5e:a5:0a:13:cf:16:8b:b4:
f2:bb:ac:c6:dc:6b:5b:cd:d6:2e:85:14:43:8a:e4:
48:62:49:7e:2d:17:53:1e:2f:f8:94:c3:5e:cd:f7:
db:0c:a3:1e:34:71:f5:ad:16:3e:18:a0:2a:0f:1e:
3d:fb:47:9e:69:b5:8e:b3:8c:47:78:f5:ad:cd:94:
db:9e:25:fc:eb:8d:d3:56:ac:ca:f6:16:88:1f:d6:
f4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:EE:F0:CE:CA:D4:91:CA:BD:4D:53:7B:C0:28:ED:CA:5B:1E:62
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/Ld7u8M7K1JHKvU1Te8Ao7cpbHmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d6:d3:1c:51:b1:9c:ab:b7:99:4f:44:eb:e4:bc:cc:d0:23:
90:90:c9:8c:5d:bb:11:70:22:34:a1:3e:01:9c:60:88:6e:cf:
3c:f1:31:7e:3c:60:ef:93:35:de:46:38:5b:cb:01:63:d8:ea:
e2:7c:5d:2c:e4:ef:31:05:83:30:38:ef:9d:43:cd:44:fe:5e:
d0:0f:22:70:55:50:5b:69:89:d6:3b:94:1a:f3:9d:3a:a1:55:
e0:52:6a:52:08:fa:0b:51:5e:06:35:af:d2:05:a0:88:c5:42:
f3:0a:c2:42:a0:da:df:47:0e:23:5e:15:cf:54:45:3c:38:0e:
be:06:99:71:12:6a:d0:bd:78:a7:c0:03:16:c8:58:37:68:7d:
34:75:a9:17:5d:12:1d:be:a1:45:92:99:8d:48:d2:4f:a5:69:
68:f0:8c:39:40:7a:b6:48:8f:00:cf:71:a1:ee:8f:93:73:92:
23:0d:5e:b3:6f:a7:33:53:e0:5c:f4:d9:18:17:35:8e:ef:2c:
c3:28:6c:a8:90:13:7d:96:5e:d2:ce:01:63:85:83:af:72:6a:
80:e9:69:01:86:7c:0b:a6:95:76:9d:cf:1e:a4:7c:1d:d1:6f:
06:ee:5d:db:6c:0b:64:62:89:3f:37:d3:7b:d6:71:59:cb:c7:
92:4d:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:33:26 2024 by rpki-client on console-ams.rpki-client.org